Outt
Sett
Behavioral task
behavioral1
Sample
a55d10f7f506cfadc1d98f650546cde6_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a55d10f7f506cfadc1d98f650546cde6_JaffaCakes118
Size
65KB
MD5
a55d10f7f506cfadc1d98f650546cde6
SHA1
da0ac6c29d638f8fd6104fbad45e9bc0a2a87cc7
SHA256
1a05b15202b923a2bcab18bbb3f87861a5914d791ed49e7002ce589d135729e0
SHA512
1d7659a2a6afe13e3e0b3bd2154e7f7de629e6a912345f52ee162fe6f130d103f65e482fdb1e688f15e3f83d7b76b0e3ae1b984c32e5a3db93e425521c6ee394
SSDEEP
1536:yl3E0T+BiClHFBt/684WZiVzX3FL+ScshtsZevUvBF:E39qBieHI8zqHFqHshqgvUvH
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a55d10f7f506cfadc1d98f650546cde6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ